Threats tagged 'ghsa-p7j9-4392-6r7p'

CVE-2024-58069 is a high-severity vulnerability in the Linux kernel's rtc pcf85063 driver. It involves a potential out-of-bounds (OOB) write during NVMEM reads when the buffer size used by an nvmem client is less than 4 bytes. This occurs because the regmap interface expects a fixed-size unsigned int buffer, leading to memory corruption. The issue has been fixed by introducing an intermediary unsigned int to safely hold the value during reads.